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DETAILED ACTION 

This action is in response to the papers filed 9/04/2007. Claims 3-16, 18-34, 49, 
and 69-76 were received for consideration. Amendments for the claims were filed 
3/13/2007. Currently claims 1, 2, 17, 35-48, and 50-68 have been cancelled claims 3- 
16, 18-34, 49, 69-76 are under consideration. 

Response to Arguments 

Applicant's arguments filed 2/21/2007 have been fully considered but they are 
moot in view of new grounds of rejection. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 3, 7, 10, 1 1, 13-15, 18, 19, 23, 28, 29, 49 and 69-74 are rejected under 

35 U.S.C. 103(a) as being unpatentable over Yang Y R et al: "Reliable Group Rekeying: 

A Performance Analysis" in view of Ray et al (U.S. 2003/01 12977). With respect to 

claim 69, a group management device that manages a group, comprising: a reception 

unit operable to receive, from a member device, a request for registration in the group 

(see chapter 1 introduction i.e. the group key is controlled by a group management 

system, which sends the group key to authorized new users as well as performs group 
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rekeying); a judging unit operable, (i) upon receiving the request, if the member device 
is authenticated as being a legitimate device (see chapter 1 introduction i.e. the group 
key is controlled by a group management system, which sends the group key to 
authorized new users), to judge whether a registered number of member devices is less 
than a maximum number of member devices registerable in the group (see chapter 2.4 
Batch rekeying algorithms), (ii) when judged in the affirmative, to issue valid period 
information showing a valid period (see chapter 4 tradeoffs of bandwidth overhead and 
rekey interval i.e. rekey interval T (is the amount of time the key is valid)) of use of 
common secret information unique to the group for the member device (see chapter 4 
tradeoffs of bandwidth overhead and rekey interval i.e. key and chapter 4.3 System 
constraints and algorithm), and to increase the registered number (see chapter 2.4 
Batch rekeying algorithms i.e. Strategy 1), and (iii) to monitor an elapse of the valid 
period and reduce the registered number when the valid period ends (see chapter 4 
tradeoffs of bandwidth overhead and rekey interval and chapter 4.3 System constraints 
and algorithm); and a communication unit operable, when judged in the affirmative, to 
output to the member device, the common secret information and the valid period 
information (see chapter 1 introduction i.e. the group key is controlled by a group 
management system, which sends the group key to authorized new users and chapter 
4.3 System constraints and algorithm). Yang does not teach that the member device 
has a unique time period that the common secret is valid. Ray teach that the that the 
member device has a unique time period that the common secret is valid (see 
paragraph 0013 and 0039). It would have been obvious at the time the invention was 
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made to a person having ordinary skill in the art to which said subject matter pertains to 
have included a time period that a key is valid for a device so that the key so more 
secure by only allowing the key to be valid for a certain amount of time (see paragraph 
001 3 and 0039). Therefore one would have been motivated to have included a time 
period that a key is valid for a device. 

With respect to claim 3, upon receiving the request, if the member device is 
authenticated as being the legitimate device, the judging unit judge whether the 
registered number of member devices is less than a maximum number of member 
devices registerable in the group, and when the judged in the affirmative, the judging 
unit registers the member device (see Yang, abstract, chapter 1, 2.4, 4.2, and 4.3). 

With respect to claim 7, a generating unit operable to generate the common 
secret information, wherein the communication unit outputs the generated common 
secret information to the member device (see Yang, abstract, chapter 1, 2.4, 4.2, and 
4.3). 

With respect to claim 10, the maximum number is formed from a first maximum 
number and a second maximum number, and the judging unit judges whether the 
registered number is less than one of the first maximum number and the second 
maximum number, and registers the member device when judged in the affirmative (see 
Yang, abstract, chapter 1, 2.4, 4.2, and 4.3). 

With respect to claim 1 1 , the first maximum number is the number of member 
devices, out of the maximum number, connectable to the group management device, 
and the second maximum number is the number of member devices, out of the 
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maximum number, not connectable to the group management device, and the judging 
unit judges, (i) when the member device is connectable to the group management 
device, whether the registered number of connectable member devices is less than the 
first maximum number, and (ii) when the member device is not connectable to the group 
management device, whether the registered number of non-connectable member 
devices is less than the second maximum number (see Yang, abstract, chapter 1, 2.4, 
4.2, and 4.3). 

With respect to claim 1 3, the judging unit functions to resist invalid access from 
outside, and the maximum number and the common secret information are stored in an 
area that is unreadable/unwritable from outside (see Yang, abstract, chapter 1 , 2.4, 4.2, 
and 4.3). 

With respect to claim 14, the judging unit is included in a portable module that is 
mountable in the group management device (see Yang, abstract, chapter 1 , 2.4, 4.2, 
and 4.3). 

With respect to claim 15, the judging unit stores a remaining number obtained by 
subtracting the registered number from the maximum number, and on receipt by the 
reception unit of the registration request, judges whether the remaining number is "0", 
and when judged that the remaining number is not "0", the communication unit outputs 
the common secret information to the member device and the judging unit subtracts "1" 
from the remaining number (see Yang, abstract, chapter 1 , 2.4, 4.2, and 4.3). 

With respect to claim 17, the judging unit, when judged that the registered 
number is less than the maximum number, issues information showing a valid period 
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during which use of the common secret information is permitted in the member device, 
increases the registered number, monitors the elapse of the valid period, and reduces 
the registered number when the valid period ends, and the communication unit outputs 
the issued information to the member device (see Yang, abstract, chapter 1, 2.4, 4.2, 
and 4.3). 

With respect to claim 18, the judging unit receives from a management device 
outside of the group, a number of member devices registerable in the group, pays an 
accounting fee in accordance with the received number, and sets the received number 
as the maximum number (see Yang, abstract, chapter 1, 2.4, 4.2, and 4.3). 

With respect to claim 19, the judging unit newly acquires from a management 
device outside of the group, a number of member devices registerable in the group, 
pays an accounting fee in accordance with the acquired number, and adds the acquired 
number to the maximum number to obtain a new maximum number (see Yang, 
abstract, chapter 1 , 2.4, 4.2, and 4.3). 

With respect to claim 23, the communication unit stores therein the common 
secret information, newly receives a different piece of common secret information, 
overwrites the stored common secret information with the newly received common 
secret information, and outputs, regularly or irregularly, the newly received common 
secret information to the member device (see Yang, abstract, chapter 1 , 2.4, 4.2, and 
4.3). 

With respect to claim 28, the received registration request requests the 
registration of a predetermined number of other member devices, the judging unit 
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judges whether an aggregate number obtained by adding the predetermined number to 
the registered number is less than the maximum number, and when judged in the 
affirmative, generates a permission right permitting a copying of the common secret 
information to the predetermined number of member devices, and the permission right 
is attached to the outputted common secret information (see Yang, abstract, chapter 1, 
2.4, 4.2, and 4.3). 

With respect to claim 29, the received registration request includes a first 
identifier unique to the member device, the judging unit stores therein the first identifier, 
the reception unit, after the outputting of the common secret information, receives a 
second identifier unique to the member device, the judging unit judges whether the 
second identifier matches the first identifier, and the communication unit, when judged 
that the first and second identifiers match, again outputs the common secret information 
to the member device (see Yang, abstract, chapter 1, 2.4, 4.2, and 4.3). 

With respect to claim 49, a member device that user a content after registering in 
a group managed by a group managing device comprising: a requesting unit operable 
to request the group management device for registration in the group (see chapter 2 
improving rekey encoding scalabilty i.e. a user can send a join request to the key 
server); a receiving unit operable to be authenticated by the group management device, 
and to receive, from the group management device, the common secret information and 
the valid period information (see chapter 1 introduction i.e. the group key is controlled 
by a group management system, which sends the group key to authorized new users 
and chapter 4.3 System constraints and algorithm); and a holding unit operable to hold 
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the received common secret information, to monitor the elapse of the valid period, and 
to delete the common secret information when the valid period ends (see chapter 1 
introduction i.e. the group key is controlled by a group management system, which 
sends the group key to authorized new users and chapter 4.3 System constraints and 
algorithm). Yang does not teach that the member device has a unique time period that 
the common secret is valid. Ray teach that the that the member device has a unique 
time period that the common secret is valid (see paragraph 0013 and 0039). It would 
have been obvious at the time the invention was made to a person having ordinary skill 
in the art to which said subject matter pertains to have included a time period that a key 
is valid for a device so that the key so more secure by only allowing the key to be valid 
for a certain amount of time (see paragraph 0013 and 0039). Therefore one would have 
been motivated to have included a time period that a key is valid for a device. 

With respect to claim 70, a group formation/management system comprising: a 
group management device (see chapter 1 introduction i.e. a group management 
system); and a group member device (see chapter 1 introduction i.e group key to 
authorized new users), the group management device including: a reception unit 
operable to receive, from a member device, a request for registration in the group (see 
chapter 1 introduction i.e. the group key is controlled by a group management system, 
which sends the group key to authorized new users as well as performs group 
rekeying); a judging unit operable, (i) upon receiving the request, if the member device 
is authenticated as being a legitimate device (see chapter 1 introduction i.e. the group 
key is controlled by a group management system, which sends the group key to 
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authorized new users), to judge whether a registered number of member devices is less 
than a maximum number of member devices registerable in the group (see chapter 2.4 
Batch rekeying algorithms), (ii) when judged in the affirmative, to issue valid period 
information showing a valid period (see chapter 4 tradeoffs of bandwidth overhead and 
rekey interval i.e. rekey interval T (is the amount of time the key is valid)) of use of 
common secret information unique to the group for the member device (see chapter 4 
tradeoffs of bandwidth overhead and rekey interval i.e. key and chapter 4.3 System 
constraints and algorithm), and to increase the registered number (see chapter 2.4 
Batch rekeying algorithms i.e. Strategy 1), and (iii) to monitor an elapse of the valid 
period and reduce the registered number when the valid period ends (see chapter 4 
tradeoffs of bandwidth overhead and rekey interval and chapter 4.3 System constraints 
and algorithm); and a communication unit operable, when judged in the affirmative, to 
output to the member device, the common secret information and the valid period 
information (see chapter 1 introduction i.e. the group key is controlled by a group 
management system, which sends the group key to authorized new users and chapter 
4.3 System constraints and algorithm). The group member device including: a 
requesting unit operable to request the group management device for registration in the 
group (see chapter 2 improving rekey encoding scalabilty i.e. a user can send a join 
request to the key server); a receiving unit operable to be authenticated by the group 
management device, and to receive, from the group management device, the common 
secret information and the valid period information (see chapter 1 introduction i.e. the 
group key is controlled by a group management system, which sends the group key to 
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authorized new users and chapter 4.3 System constraints and algorithm); and a holding 
unit operable to hold the received common secret information, to monitor the elapse of 
the valid period, and to delete the common secret information when the valid period 
ends (see chapter 1 introduction i.e. the group key is controlled by a group management 
system, which sends the group key to authorized new users and chapter 4.3 System 
constraints and algorithm). Yang does not teach that the member device has a unique 
time period that the common secret is valid. Ray teach that the that the member device 
has a unique time period that the common secret is valid (see paragraph 0013 and 
0039). It would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains to have included a 
time period that a key is valid for a device so that the key so more secure by only 
allowing the key to be valid for a certain amount of time (see paragraph 0013 and 
0039). Therefore one would have been motivated to have included a time period that a 
key is valid for a device. 

With respect to claim 71, a group management method used in a group 
management device that manages a group, the group management method comprising: 
receiving from a member device, a request for registration in the group (see chapter 2 
improving rekey encoding scalabilty i.e. a user can send a join request to the key 
server); (i) upon receiving the request, if the member device is authenticated as being a 
legitimate device (see chapter 1 introduction i.e. the group key is controlled by a group 
management system, which sends the group key to authorized new users), to judge 
whether a registered number of member devices is less than a maximum number of 



Application/Control Number: 1 0/649,678 Page 1 1 

Art Unit: 2132 

member devices registerable in the group (see chapter 2.4 Batch rekeying algorithms), 
(ii) when judged in the affirmative, to issue valid period information showing a valid 
period (see chapter 4 tradeoffs of bandwidth overhead and rekey interval i.e. rekey 
interval T (is the amount of time the key is valid)) of use of common secret information 
unique to the group for the member device (see chapter 4 tradeoffs of bandwidth 
overhead and rekey interval i.e. key and chapter 4.3 System constraints and algorithm), 
and to increase the registered number (see chapter 2.4 Batch rekeying algorithms i.e. 
Strategy 1), and (iii) monitoring an elapse of the valid period and reducing the registered 
number when the valid period ends (see chapter 1 introduction i.e. the group key is 
controlled by a group management system, which sends the group key to authorized 
new users and chapter 4.3 System constraints and algorithm); and when judged in the 
affirmative, outputting to the member device the common secret information and the 
valid period information (see chapter 1 introduction i.e. the group key is controlled by a 
group management system, which sends the group key to authorized new users and 
chapter 4.3 System constraints and algorithm). Yang does not teach that the member 
device has a unique time period that the common secret is valid. Ray teach that the that 
the member device has a unique time period that the common secret is valid (see 
paragraph 0013 and 0039). It would have been obvious at the time the invention was 
made to a person having ordinary skill in the art to which said subject matter pertains to 
have included a time period that a key is valid for a device so that the key so more 
secure by only allowing the key to be valid for a certain amount of time (see paragraph 
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0013 and 0039). Therefore one would have been motivated to have included a time 
period that a key is valid for a device. 

With respect to claim 72, a recording medium storing a computer program used 
in a group management device that manages a group, the computer program 
comprising: receiving from a member device, a request for registration in the group (see 
chapter 2 improving rekey encoding scalabilty i.e. a user can send a join request to the 
key server); (i) upon receiving the request, if the member device is authenticated as 
being a legitimate device (see chapter 1 introduction i.e. the group key is controlled by a 
group management system, which sends the group key to authorized new users), to 
judge whether a registered number of member devices is less than a maximum number 
of member devices registerable in the group (see chapter 2.4 Batch rekeying 
algorithms), (ii) when judged in the affirmative, to issue valid period information showing 
a valid period (see chapter 4 tradeoffs of bandwidth overhead and rekey interval i.e. 
rekey interval T (is the amount of time the key is valid)) of use of common secret 
information unique to the group fox the member device (see chapter 4 tradeoffs of 
bandwidth overhead and rekey interval i.e. key and chapter 4.3 System constraints and 
algorithm), and to increase the registered number (see chapter 2.4 Batch rekeying 
algorithms i.e. Strategy 1), and (iii) monitoring an elapse of the valid period and 
reducing the registered number when the valid period ends (see chapter 1 introduction 
i.e. the group key is controlled by a group management system, which sends the group 
key to authorized new users and chapter 4.3 System constraints and algorithm); and 
when judged in the affirmative, outputting to the member device the common secret 



Application/Control Number: 10/649,678 Page 13 

Art Unit: 2132 

information and the valid period information (see chapter 1 introduction i.e. the group 
key is controlled by a group management system, which sends the group key to 
authorized new users and chapter 4.3 System constraints and algorithm). Yang does 
not teach that the member device has a unique time period that the common secret is 
valid. Ray teach that the that the member device has a unique time period that the 
common secret is valid (see paragraph 0013 and 0039). It would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains to have included a time period that a key is valid for a device so 
that the key so more secure by only allowing the key to be valid for a certain amount of 
time (see paragraph 0013 and 0039). Therefore one would have been motivated to 
have included a time period that a key is valid for a device. 

With respect to claim 73, a control method used in a group management device 
that manages a group, the control method comprising: requesting the group 
management device for registration in the group (see chapter 2 improving rekey 
encoding scalabilty i.e. a user can send a join request to the key server); being 
authenticated by the group management device and receiving, from the group 
management device, common secret information unique to the group that includes valid 
period information showing a valid period of use of the common secret information (see 
chapter 1 introduction i.e. the group key is controlled by a group management system, 
which sends the group key to authorized new users and chapter 4.3 System constraints 
and algorithm); and holding the received common secret information, monitoring an 
elapse of the valid period, and deleting the common secret information when the valid 
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period ends (see chapter 4 tradeoffs of bandwidth overhead and rekey interval i.e. key 
and chapter 4.3 System constraints and algorithm). Yang does not teach that the 
member device has a unique time period that the common secret is valid. Ray teach 
that the that the member device has a unique time period that the common secret is 
valid (see paragraph 0013 and 0039). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have included a time period that a key is valid for a device so that the 
key so more secure by only allowing the key to be valid for a certain amount of time 
(see paragraph 0013 and 0039). Therefore one would have been motivated to have 
included a time period that a key is valid for a device. 

With respect to claim 74, a recording medium storing a computer program used 
in a group management device that manages a group, the computer program 
comprising: requesting the group management device for registration in the group (see 
chapter 2 improving rekey encoding scalabilty i.e. a user can send a join request to the 
key server); being authenticated by the group management device and receiving, from 
the group management device, common secret information unique to the group that 
includes valid period information showing a valid period of use of the common secret 
information (see chapter 1 introduction i.e. the group key is controlled by a group 
management system, which sends the group key to authorized new users and chapter 
4.3 System constraints and algorithm); and holding the received common secret 
information, monitoring an elapse of the valid period and deleting the common secret 
information when the valid period ends (see chapter 4 tradeoffs of bandwidth overhead 
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and rekey interval i.e. key and chapter 4.3 System constraints and algorithm). Yang 
does not teach that the member device has a unique time period that the common 
secret is valid. Ray teach that the that the member device has a unique time period that 
the common secret is valid (see paragraph 0013 and 0039). It would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains to have included a time period that a key is valid for a 
device so that the key so more secure by only allowing the key to be valid for a certain 
amount of time (see paragraph 0013 and 0039). Therefore one would have been 
motivated to have included a time period that a key is valid for a device. 

With respect to claim 75, a reception unit operable to receive, from a member 
device, a request for registration in the group (see chapter 1 introduction i.e. the group 
key is controlled by a group management system, which sends the group key to 
authorized new users as well as performs group rekeying); a judging unit operable, (i) 
upon receiving the request, if the member device is authenticated as being a legitimate 
device (see chapter 1 introduction i.e. the group key is controlled by a group 
management system, which sends the group key to authorized new users), to judge 
whether a registered number of member devices is less than a maximum number of 
member devices registerable in the group (see chapter 2.4 Batch rekeying algorithms), 
(ii) when judged in the affirmative, to issue valid period information showing a valid 
period (see chapter 4 tradeoffs of bandwidth overhead and rekey interval i.e. rekey 
interval T (is the amount of time the key is valid)) of use of common secret information 
unique to the group for the member device (see chapter 4 tradeoffs of bandwidth 
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overhead and rekey interval i.e. key and chapter 4.3 System constraints and algorithm), 
and to increase the registered number (see chapter 2.4 Batch rekeying algorithms i.e. 
Strategy 1), and (iii) to monitor an elapse of the valid period and reduce the registered 
number when the valid period ends (see chapter 4 tradeoffs of bandwidth overhead and 
rekey interval and chapter 4.3 System constraints and algorithm); and a communication 
unit operable, when judged in the affirmative, to output to the member device, the 
common secret information and the valid period information (see chapter 1 introduction 
i.e. the group key is controlled by a group management system, which sends the group 
key to authorized new users and chapter 4.3 System constraints and algorithm). Yang 
does not teach that the member device has a unique time period that the common 
secret is valid. Ray teach that the that the member device has a unique time period that 
the common secret is valid (see paragraph 0013 and 0039). It would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains to have included a time period that a key is valid for a 
device so that the key so more secure by only allowing the key to be valid for a certain 
amount of time (see Ray paragraph 0013 and 0039). Therefore one would have been 
motivated to have included a time period that a key is valid for a device. 

With respect to claim 76, the valid period information shows a period in which an 
off-line device is able to operate as the member device (see Ray paragraph 0013 and 
0039). 
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Claim 3-6 and 69 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wong et all: "Keystone: A Group Key Management Service" in view of Yang Y R et 
al: "Reliable Group Rekeying: A Performance Analysis" in further view of Ray et al (U.S. 
2003/01 12977). With respect to claim 69, Wong teaches a group management device 
that manages a group, comprising: a reception unit operable to receive, from a member 
device, a request for registration in the group (see chapter 1 Introduction group key 
management and chapter 3.1 Registrar setup); a judging unit operable, (i) upon 
receiving the request, if the member device is authenticated as being a legitimate 
device (see chapter 3.1 Registrar setup and 3.2 Client registration), to judge whether a 
registered number of member devices is less than a maximum number of member 
devices registerable in the group (see chapter 2), a communication unit operable, when 
judged in the affirmative, to output to the member device, the common secret 
information (see chapter 3 Keystone Architecture). Wong does not teach (ii) when 
judged in the affirmative, to issue valid period information showing a valid period of use 
of common secret information unique to the group for the member device, and to 
increase the registered number, and (iii) to monitor an elapse of the valid period and 
reduce the registered number when the valid period ends; and to output to the member 
device, the valid period information. Yang teaches (ii) when judged in the affirmative, to 
issue valid period information showing a valid period (see chapter 4 tradeoffs' of 
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bandwidth overhead and rekey interval i.e. rekey interval T (is the amount of time the 
key is valid)) of use of common secret information unique to the group for the member 
device (see chapter 4 tradeoffs of bandwidth overhead and rekey interval i.e. key and 
chapter 4.3 System constraints and algorithm), and to increase the registered number 
(see chapter 2.4 Batch rekeying algorithms i.e. Strategy 1), and (iii) to monitor an elapse 
of the valid period and reduce the registered number when the valid period ends (see 
chapter 4 tradeoffs of bandwidth overhead and rekey interval and chapter 4.3 System 
constraints and algorithm); and to output to the member device, the valid period 
information (see chapter 1 introduction i.e. the group key is controlled by a group 
management system, which sends the group key to authorized new users and chapter 
4.3 System constraints and algorithm). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have the rekey interval as a system design parameter that a group 
key management system can use to control bandwidth overhead (see chapter 4.3 
System constraints and algorithm). Therefore one would have been motivated to have 
the common secret have a valid period. Wong and Yang does not teach that the 
member device has a unique time period that the common secret is valid. Ray teach 
that the that the member device has a unique time period that the common secret is 
valid (see paragraph 0013 and 0039). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have included a time period that a key is valid for a device so that the 
key so more secure by only allowing the key to be valid for a certain amount of time 
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(see paragraph 0013 and 0039). Therefore one would have been motivated to have 
included a time period that a key is valid for a device. 

With respect to claim 3, upon receiving the request, if the member device is 
authenticated as being the legitimate device, the judging unit judge whether the 
registered number of member devices is less than a maximum number of member 
devices registerable in the group, and when the judged in the affirmative, the judging 
unit registers the member device (see Wong chapters 1, 3.1, 3.2, 3.3, and 4). 

With respect to claim 4, the judging unit includes: an authentication subunit 
operable to hold a second initial value, and to authenticate the member device, using 
the second initial value and a first initial value held by the member device; and a device- 
number judging subunit operable, when authentication is successful, to judge whether 
the registered number is less than the maximum number, the common secret 
information outputted by the communication unit shows "registered in the group", and 
the member device receives and holds the outputted common secret information, and 
deactivates the first initial value (see Wong chapters 1, 3.1, 3.2, 3.3, and 4). 

With respect to claim 5, the first and second initial values show "unregistered in 
the group" (see Wong chapters 1 , 3.1 , 3.2, 3.3, and 4). 

With respect to claim 6, the first and second initial values show "unregistered in 
any group" (see Wong chapters 1, 3.1, 3.2, 3.3, and 4). 

Claims 8 and 9 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Yang Y R et al: "Reliable Group Rekeying: A Performance Analysis" in view of Ray et al 
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(U.S. 2003/01 12977) in further view of Steiner et al: "Cliques: A New approach to Group 
Key Agreement". Yang teaches everything with respect to claim 3 above but with 
respect to claim 8, the judging unit receives the common secret information from the 
out-group management device, and the communication unit outputs the received 
common secret information to the member device (see Yang, abstract, chapter 1, 2.4, 
4.2, and 4.3). Yang does not teach the common secret information is generated by a 
management device outside of the group. Steiner teaches the common secret 
information is generated by a management device outside of the group (see Steiner 
chapters 2, 3, and 5.2). It would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains to have 
a centralized key generation agreement since it is the most intuitive and most nature 
(see chapter 2). Therefore one would have been motivated to have the common secret 
information is generated by a management device outside of the group. 

With respect to claim 9, the reception unit, on receipt of the registration request, 
notifies the receipt to a management device outside of the group, the out-group 
management device judges whether the registered number is less than the maximum 
number, the judging unit, instead of judging whether the registered number is less than 
the maximum number, receives a judgment result from the out-group management 
device, and the communication unit outputs the common secret information to the 
member device, when the judgment result shows that the registered number is less than 
the maximum number (see Steiner chapters 2, 3, and 5.2). 
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Claims 3, 12 and 69 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Paolo (UK Patent application GB 2343025) in view of Yang Y R et al: "Reliable 
Group Rekeying: A Performance Analysis" in further view of Ray et al (U.S. 
2003/0112977). With respect to claim 69, Paolo teaches a group management device 
that manages a group , comprising: a reception unit operable to receive, from a member 
device, a request for registration in the group (see figure 3 and page 5 lines 4-29 i.e. 
when a request is received from a client); a judging unit operable, (i) upon receiving the 
request, if the member device is authenticated as being a legitimate device, to judge 
whether a registered number of member devices is less than a maximum number of 
member devices registerable in the group (see page 5 lines 4-29 i.e. the server creates 
a new license instance record and decrements by one the number of available 
licenses), a communication unit operable, when judged in the affirmative, to output to 
the member device, the common secret information (see page 5 lines 4-29 i.e. the 
server sends a reply to the client authorizing the client to use the software). Paolo does 
not teach (ii) when judged in the affirmative, to issue valid period information showing a 
valid period of use of common secret information unique to the group for the member 
device, and to increase the registered number, and (iii) to monitor an elapse of the valid 
period and reduce the registered number when the valid period ends; and to output to 
the member device, the valid period information. Yang teaches (ii) when judged in the 
affirmative, to issue valid period information showing a valid period (see chapter 4 
tradeoffs of bandwidth overhead and rekey interval i.e. rekey interval T (is the amount of 
time the key is valid)) of use of common secret information unique to the group for the 
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member device (see chapter 4 tradeoffs of bandwidth overhead and rekey interval i.e. 
key and chapter 4.3 System constraints and algorithm), and to increase the registered 
number (see chapter 2.4 Batch rekeying algorithms i.e. Strategy 1), and (iii) to monitor 
an elapse of the valid period and reduce the registered number when the valid period 
ends (see chapter 4 tradeoffs of bandwidth overhead and rekey interval and chapter 4.3 
System constraints and algorithm); and to output to the member device, the valid period 
information (see chapter 1 introduction i.e. the group key is controlled by a group 
management system, which sends the group key to authorized new users and chapter 
4.3 System constraints and algorithm). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have the rekey interval as a system design parameter that a group 
key management system can use to control bandwidth overhead (see chapter 4.3 
System constraints and algorithm). Therefore one would have been motivated to have 
the common secret have a valid period. Paolo and Yang does not teach that the 
member device has a unique time period that the common secret is valid. Ray teach 
that the that the member device has a unique time period that the common secret is 
valid (see paragraph 0013 and 0039). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have included a time period that a key is valid for a device so that the 
key so more secure by only allowing the key to be valid for a certain amount of time 
(see paragraph 001 3 and 0039). Therefore one would have been motivated to have 
included a time period that a key is valid for a device. 
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With respect to claim 3, upon receiving the request, if the member device is 
authenticated as being the legitimate device, the judging unit judge whether the 
registered number of member devices is less than a maximum number of member 
devices registerable in the group, and when the judged in the affirmative, the judging 
unit registers the member device (see Paolo page 5 lines 4-29). 

with respect to claim 12 does not teach the communication unit outputs to 
another group management device, a request inquiring whether the member device is 
registerable in the other group management device, the other group management 
device receives the inquiry request, judges whether a registered number of member 
devices is less than a maximum number of member devices registerable with the other 
group management device, and when judged in the affirmative, registers the member 
device and outputs the common secret information to the group management device, 
and the communication unit, on receipt of the common secret information from the other 
group management device, outputs the received common secret information to the 
member device (see Paolo Figure 3 and page 1 line 6 - page 5 line 29). 

Claim 16 is rejected under 35 U.S. C. 103(a) as being unpatentable over Yang Y 
R et al: "Reliable Group Rekeying: A Performance Analysis" in view of Ray et al (U.S. 
2003/01 12977) in further view of Canetti et al: "Multicast Security: A Taxonomy and 
Some Efficient Construction". Yang teaches everything with respect to claim 3 above 
but with respect to claim 16 does not teach the reception unit, after the outputting of the 
common secret information, receives from the member device, a request for withdrawal 
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from the group, the communication unit, on receipt by the reception unit of the 
withdrawal request, outputs to the member device, a notification indicating to delete the 
common secret information, the reception unit receives from the member device, a 
notification showing that deletion of the common secret information has been 
completed, and the judging unit, on receipt by the reception unit of the deletion- 
completed notification, reduces the registered number. Canetti teaches the reception 
unit, after the outputting of the common secret information, receives from the member 
device, a request for withdrawal from the group, the communication unit, on receipt by 
the reception unit of the withdrawal request, outputs to the member device, a notification 
indicating to delete the common secret information, the reception unit receives from the 
member device, a notification showing that deletion of the common secret information 
has been completed, and the judging unit, on receipt by the reception unit of the 
deletion-completed notification, reduces the registered number, (see Canetti see 
chapter 4 i.e. deletion of group key). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have the user leaving the group delete their group key to conceal 
future communication from the former member (see chapter 4). Therefore one would 
have been motivated to have the former member delete the common secret information. 

Claims 3, 20-22, 24-27, 34 and 69 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Yevgeny (UK Patent application GB 2353682) in view of Yang Y R et 
al: "Reliable Group Rekeying: A Performance Analysis" in view of Ray et al (U.S. 
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2003/01 12977). With respect to claim 69, Yevgeny teaches a group management 
device that manages a group , comprising: a reception unit operable to receive, from a 
member device, a request for registration in the group; a judging unit operable, (i) upon 
receiving the request, if the member device is authenticated as being a legitimate 
device, to judge whether a registered number of member devices is less than a 
maximum number of member devices registerable in the group, a communication unit 
operable, when judged in the affirmative, to output to the member device, the common 
secret information (see page 7 line 25 - page 8 line 2 page 10 lines 11-16 page 19 line 
23 - page 20 line 24). Yevgeny does not teach (ii) when judged in the affirmative, to 
issue valid period information showing a valid period of use of common secret 
information unique to the group for the member device, and to increase the registered 
number, and (iii) to monitor an elapse of the valid period and reduce the registered 
number when the valid period ends; and to output to the member device, the valid 
period information. Yang teaches (ii) when judged in the affirmative, to issue valid 
period information showing a valid period (see chapter 4 tradeoffs of bandwidth 
overhead and rekey interval i.e. rekey interval T (is the amount of time the key is valid)) 
of use of common secret information unique to the group for the member device (see 
chapter 4 tradeoffs of bandwidth overhead and rekey interval i.e. key and chapter 4.3 
System constraints and algorithm), and to increase the registered number (see chapter 
2.4 Batch rekeying algorithms i.e. Strategy 1), and (iii) to monitor an elapse of the valid 
period and reduce the registered number when the valid period ends (see chapter 4 
tradeoffs of bandwidth overhead and rekey interval and chapter 4.3 System constraints 
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and algorithm); and to output to the member device, the valid period information (see 
chapter 1 introduction i.e. the group key is controlled by a group management system, 
which sends the group key to authorized new users and chapter 4.3 System constraints 
and algorithm). It would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains to have the 
rekey interval as a system design parameter that a group key management system can 
use to control bandwidth overhead (see chapter 4.3 System constraints and algorithm). 
Therefore one would have been motivated to have the common secret have a valid 
period. Yevgeny and Yang does not teach that the member device has a unique time 
period that the common secret is valid. Ray teach that the that the member device has a 
unique time period that the common secret is valid (see paragraph 0013 and 0039). It 
would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have included a time 
period that a key is valid for a device so that the key so more secure by only allowing 
the key to be valid for a certain amount of time (see paragraph 001 3 and 0039). 
Therefore one would have been motivated to have included a time period that a key is 
valid for a device. 

With respect to claim 3, upon receiving the request, if the member device is 
authenticated as being the legitimate device, the judging unit judge whether the 
registered number of member devices is less than a maximum number of member 
devices registerable in the group, and when the judged in the affirmative, the judging 
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unit registers the member device (see Yevgeny page 5 lines 11-16, page 7 line 25 - 
page 8 line 2, page 10 lines 11-16, page 19 line 23 - page 20 line 24). 

With respect to claim 20, the reception unit, after the outputting of the common 
secret information, receives a communication request from the member device, the 
judging unit authenticates the member device using the common secret information and 
common secret information held by the member device, and the communication unit 
communicates with the member device when authentication is successful (see Yevgeny 
page 5 lines 11-16, page 7 line 25 - page 8 line 2, page 10 lines 11-16, page 19 line 23 
- page 20 line 24). 

With respect to claim 21, a content storage unit operable to store therein a 
content key and an encrypted content encrypted using the content key; and an 
encryption unit operable to encrypt the content key using a key generated based on the 
common secret information, to generate an encrypted content key, wherein the 
communication unit outputs the encrypted content and the encrypted content key to the 
member device (see Yevgeny page 5 lines 11-16, page 7 line 25 - page 8 line 2, page 
1 0 lines 11-16, page 1 9 line 23 - page 20 line 24). 

With respect to claim 22, the judging unit authenticates the member device using 
the common secret information and common secret information held by the member 
device, and shares a session key with the member device, using the common secret 
information, and the encryption unit, when authentication is successful, encrypts the 
content key using the shared session key (see Yevgeny page 5 lines 11-16, page 7 line 
25 - page 8 line 2, page 10 lines 11-16, page 19 line 23 - page 20 line 24). 
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With respect to claim 24, a content storage unit operable to store therein a 
content key and an encrypted content encrypted using the content key; an encryption 
unit operable to encrypt the content key using a key generated based on the common 
secret information, to generate an encrypted content key; and a writing unit operable to 
write the encrypted content and the encrypted content key to a portable recordable 
medium (see Yevgeny page 5 lines 11-16, page 7 line 25 - page 8 line 2, page 10 lines 
11-16, page 1 9 line 23 - page 20 line 24). 

With respect to claim 25, the received registration request includes an identifier 
identifying the member device, and the encryption unit encrypts the content key using a 
key generated based on the common secret information and the identifier, to generate 
the encrypted content key (see Yevgeny page 5 lines 11-16, page 7 line 25 - page 8 
line 2, page 10 lines 11-16, page 19 line 23 - page 20 line 24). 

With respect to claim 26, the encryption unit encrypts the content key using a key 
generated based on the common secret information and an identifier unique to the 
portable recordable medium (see Yevgeny page 5 lines 11-16, page 7 line 25 - page 8 
line 2, page 1 0 lines 11-16, page 1 9 line 23 - page 20 line 24). 

With respect to claim 27, a holding unit operable to hold, in correspondence with 
identifiers that each identify a different group, (i) common secret information unique to 
the group and (ii) a maximum number of member devices registerable in the group, 
wherein the received registration request includes one of the identifiers, the judging unit, 
on receipt by the reception unit of the registration request, judges whether the number 
of member devices registered in a group identified by the identifier is less than a 
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maximum number corresponding to the identifier, and when judged in the affirmative, 
registers the member device in the group and selects common secret information 
corresponding to the identifier, and the communication unit outputs the selected 
common secret information to the member device (see Yevgeny page 5 lines 11-16, 
page 7 line 25 - page 8 line 2, page 10 lines 11-16, page 19 line 23 - page 20 line 24). 

With respect to claim 34, a determining unit operable, after the outputting of the 
common secret information, to determine a member device registered in the group to be 
another group management device; and a dividing unit operable to divide member 
devices registered in the group into member devices to be registered in a group 
managed by the group management device and member devices to be registered in 
another group managed by the other group management device, and the 
communication unit outputs, after the dividing by the dividing unit, a different piece of 
common secret information to the member devices to be registered in the group 
managed by the group management device (see Yevgeny page 5 lines 11-16, page 7 
line 25 - page 8 line 2, page 1 0 lines 11-16, page 1 9 line 23 - page 20 line 24). 

Claims 3, 30-33, and 69 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Huang et al: "Group leader election under-state routing" in view of 
Yang Y R et al: "Reliable Group Rekeying: A Performance Analysis" in further view of 
Ray et al (U.S. 2003/01 12977). With respect to claim 69, Huang teaches a group 
management device that manages a group , comprising: a reception unit operable to 
receive, from a member device, a request for registration in the group; a judging unit 
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operable, (i) upon receiving the request, if the member device is authenticated as being 
a legitimate device, to judge whether a registered number of member devices is less 
than a maximum number of member devices registerable in the group, a communication 
unit operable, when judged in the affirmative, to output to the member device, the 
common secret information (see Huang chapter 2.2). Huang does not teach (ii) when 
judged in the affirmative, to issue valid period information showing a valid period of use 
of common secret information unique to the group for the member device, and to 
increase the registered number, and (iii) to monitor an elapse of the valid period and 
reduce the registered number when the valid period ends; and to output to the member 
device, the valid period information. Yang teaches (ii) when judged in the affirmative, to 
issue valid period information showing a valid period (see chapter 4 tradeoffs of 
bandwidth overhead and rekey interval i.e. rekey interval T (is the amount of time the 
key is valid)) of use of common secret information unique to the group for the member 
device (see chapter 4 tradeoffs of bandwidth overhead and rekey interval i.e. key and 
chapter 4.3 System constraints and algorithm), and to increase the registered number 
(see chapter 2.4 Batch rekeying algorithms i.e. Strategy 1), and (iii) to monitor an elapse 
of the valid period and reduce the registered number when the valid period ends (see 
chapter 4 tradeoffs of bandwidth overhead and rekey interval and chapter 4.3 System 
constraints and algorithm); and to output to the member device, the valid period 
information (see chapter 1 introduction i.e. the group key is controlled by a group 
management system, which sends the group key to authorized new users and chapter 
4.3 System constraints and algorithm). It would have been obvious at the time the 
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invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have the rekey interval as a system design parameter that a group 
key management system can use to control bandwidth overhead (see chapter 4.3 
System constraints and algorithm). Therefore one would have been motivated to have 
the common secret have a valid period. Huang and Yang does not teach that the 
member device has a unique time period that the common secret is valid. Ray teach 
that the that the member device has a unique time period that the common secret is 
valid (see paragraph 0013 and 0039). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have included a time period that a key is valid for a device so that the 
key so more secure by only allowing the key to be valid for a certain amount of time 
(see paragraph 0013 and 0039). Therefore one would have been motivated to have 
included a time period that a key is valid for a device. 

With respect to claim 3, upon receiving the request, if the member device is 
authenticated as being the legitimate device, the judging unit judge whether the 
registered number of member devices is less than a maximum number of member 
devices registerable in the group, and when the judged in the affirmative, the judging 
unit registers the member device (see Huang chapter 2.2). 

With respect to claim 30, when the group management device is determined to 
be a new group management device for managing a new group formed by combining 
groups managed by a plurality of group management devices, the communication unit 
outputs to member devices registered in the groups, new common secret information 
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unique to the new group, and when one of the other group management devices is 
determined to be the new group management device, the group management device 
further comprises: a receiving unit operable to receive the new common secret 
information from the other group management device; and a holding unit operable to 
hold the received new common secret information (see Huang chapter 2.2). 

With respect to claim 31 , the communication unit determines in conjunction with 
the other group management devices, one of the group management devices to be the 
new group management device (see Huang chapter 2.2). 

With respect to claim 32, the holding unit stores therein a priority level of the 

group management device, and the communication unit determines, out of the stored 

« 

priority level and priority levels of the other group management devices, the group 
management device having the highest priority level to be the new group management 
device (see Huang chapter 2.2). 

With respect to claim 33, each member device registered in the groups managed 
by the group management device and the other group management devices has a 
priority level, and when the group management device is determined to be the new 
group management device, the reception unit acquires the priority levels of the member 
devices, the group management device further comprises a selecting unit operable to 
select, in order from highest to lowest of the acquired priority levels, member devices for 
registration in the new group, the selected number of member devices being less than 
or equal to a maximum number of member devices registerable in the new group, and 
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the communication unit outputs the new common secret information to the selected 
member devices (see Huang chapter 2.2). 
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